I suspect we need to use setfacl rather than chmod.